Privacy

Last updated 5 September 2026

Lean Report Card is a static website. Published reports are public JSON. Form submissions are sent to PostHog as product events so we can operate the index.

What we collect

If you submit a repository: the GitHub URL, your email address, whether the request is a rescan, and whether you allow the result to be published on this website. If you use Contact: your message and email. The site also records cookieless page views and browser exceptions.

What we do not collect

We do not set analytics cookies, do not record sessions, do not autocapture clicks or forms, and do not build visitor profiles from anonymous browsing. We ask PostHog not to store client IP addresses on these events.

Public reports

Analyzer output for a public repository may be published in reports/ and shown in the index. Do not submit a repository if you do not want that result to be public.

Retention and contact

Submission events remain in PostHog until we delete them. Use the Contact control on the index if you want a submission removed. This notice is for a small research service and is not legal advice.